Let’s Encrypt setup for Apache, NGINX & Node.js

LetsEncrypt.md

Let's Encrypt

Examples of getting certificates from Let's Encrypt working on Apache, NGINX and Node.js servers.

Obtain certificates

I chose to use the manual method, you have to make a file available to verify you own the domain. Follow the commands from running

echo "HASH1.HASH2" > static/.well-known/acme-challenge/HASH1

git clone https://github.com/letsencrypt/letsencrypt
cd letsencrypt
./letsencrypt-auto certonly --manual --email [email protected] -d example.com

This creates a directory: /etc/letsencrypt/live/example.com/ containing certificate files:

• cert.pem
• chain.pem
• fullchain.pem
• privkey.pem

Node.js

const express = require('express');
const https = require('https');
const fs = require('fs');

vat certPah = "./config/certs/<domain>/";

var options = {
  key: fs.readFileSync(certPah + 'privkey.pem'),
  cert: fs.readFileSync(certPah + 'cert.pem'),
  ca: fs.readFileSync(certPah +'chain.pem')
};

const app 	= express();

app.use(express.static(__dirname + '/static'));

const server = https.createServer(options, app);

server.listen(443, function listening() {
  console.log('Listening on %d', server.address().port);
});


/*
https.createServer(options, function (req, res) {
  res.writeHead(200);
  res.end("hello world\n");
}).listen(8000);
*/

Apache

LoadModule ssl_module libexec/apache2/mod_ssl.so
Listen 443
<VirtualHost *:443>
  ServerName example.com
  SSLEngine on
  SSLCertificateFile "/etc/letsencrypt/live/example.com/cert.pem"
  SSLCertificateKeyFile "/etc/letsencrypt/live/example.com/privkey.pem"
  SSLCertificateChainFile "/etc/letsencrypt/live/example.com/chain.pem"
</VirtualHost>

NGINX

server {
    listen              443 ssl;
    server_name         example.com;
    ssl_certificate     /etc/letsencrypt/live/example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;
}